Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A914BC7A0000/0/323430613a656530303a3a2f32382d3330203d3e20313438303030.roa
File: 323430613a656530303a3a2f32382d3330203d3e20313438303030.roa (raw, json)
Hash identifier: UPGNplWMOzpgGfRXLqC9nFmGMUNyrGshHgRllKGKmqE=
Subject key identifier: 71:14:16:9D:31:BD:D1:93:33:07:99:22:79:0E:36:F2:72:FB:D9:33
Certificate issuer: /CN=A914BC7A0000/serialNumber=2C067158AEC26270809CF62CF59FA1FE4F81FAB9
Certificate serial: 49DEA09E17BC9BA405F95B5A2EF57D2266C97099
Authority key identifier: 2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/323430613a656530303a3a2f32382d3330203d3e20313438303030.roa
Signing time: Tue 20 Jun 2023 07:00:00 +0000
ROA not before: Tue 20 Jun 2023 06:55:00 +0000
ROA not after: Tue 18 Jun 2024 07:00:00 +0000
asID: 148000
IP address blocks: 240a:ee00::/28 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:de:a0:9e:17:bc:9b:a4:05:f9:5b:5a:2e:f5:7d:22:66:c9:70:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A0000/serialNumber=2C067158AEC26270809CF62CF59FA1FE4F81FAB9
Validity
Not Before: Jun 20 06:55:00 2023 GMT
Not After : Jun 18 07:00:00 2024 GMT
Subject: CN=7114169D31BDD19333079922790E36F272FBD933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:63:f9:b9:47:de:e6:c4:eb:1a:14:d0:29:
94:d1:d8:f9:46:3a:75:b7:c3:dd:68:53:0b:c0:58:
37:0e:04:c7:59:2f:a0:22:e7:91:62:e3:ab:c7:d1:
04:77:2d:9f:1b:a1:45:52:0b:06:3b:d2:76:62:c4:
50:cb:02:28:b6:c1:81:43:08:c5:b4:6f:99:24:44:
17:e1:c4:ec:75:49:be:d9:18:f9:0a:8a:94:23:69:
9b:d8:73:57:c5:d9:f3:ac:4c:41:3b:0f:35:f6:08:
50:16:cb:fb:0e:ce:4d:ee:99:76:8b:ce:78:44:53:
b2:fc:fc:37:57:e8:be:7f:9c:36:53:68:c4:fa:e9:
d6:90:d6:8f:99:b9:c5:30:58:5c:e5:cf:36:59:16:
4d:b9:af:f5:91:1f:3d:18:5c:cb:bb:59:65:09:e6:
49:9c:f3:50:23:86:08:67:67:f5:d7:c6:58:2b:3e:
92:ae:de:9a:d1:3a:a0:be:20:01:f9:85:75:9a:d2:
a6:98:79:3b:fd:14:83:cb:d2:4f:6c:51:00:07:28:
f3:46:bc:99:cf:9f:b9:24:89:05:c2:33:c2:a1:c3:
0f:5f:a5:bb:49:31:61:9a:cd:64:88:3b:92:4e:65:
55:96:ea:5f:ae:06:bf:65:65:17:e0:e2:41:2c:d1:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:14:16:9D:31:BD:D1:93:33:07:99:22:79:0E:36:F2:72:FB:D9:33
X509v3 Authority Key Identifier:
keyid:2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/2C067158AEC26270809CF62CF59FA1FE4F81FAB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/323430613a656530303a3a2f32382d3330203d3e20313438303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ee00::/28
Signature Algorithm: sha256WithRSAEncryption
17:89:87:39:3e:34:3c:39:e9:c2:90:12:25:65:8a:fc:bc:f1:
de:5a:a7:72:f5:c2:72:db:fa:33:81:d1:20:a3:bf:96:8c:d8:
3a:a1:17:dd:df:be:3b:b0:85:53:58:09:6b:ba:c1:af:66:f4:
d1:50:0c:ab:c2:e4:95:0d:4a:a5:52:f2:59:c6:6f:fe:df:52:
06:3c:fc:6c:b4:6e:39:1b:32:6a:2e:e6:7e:04:14:e0:55:77:
4b:5b:2d:20:f3:33:51:ba:60:08:1e:8d:ac:fe:d0:c5:25:37:
3c:81:82:4d:b8:c9:58:69:03:1f:25:3a:d0:bb:e4:ce:40:2e:
55:dd:a9:dd:7f:f2:29:98:64:72:b9:b2:38:00:b2:db:75:c9:
3b:fa:52:de:97:c5:3d:31:89:23:32:cb:0e:08:f5:ab:a7:87:
bb:6a:ef:3d:64:43:da:86:aa:75:51:ad:8f:a6:ec:6e:bc:b5:
5c:22:4f:27:9a:c8:72:99:24:60:83:3c:1b:9f:18:6a:0a:82:
db:c1:47:52:d4:8b:35:a6:e2:7b:01:d2:cb:9d:81:d6:f1:fa:
fd:7c:63:06:ea:50:c2:84:51:36:93:79:40:39:f9:bd:f9:6a:
ed:ed:c9:0a:65:cf:29:91:cb:9c:1e:8d:85:4f:80:bb:6f:18:
bb:f1:6b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org